SolarWinds uses cookies on our websites to facilitate and improve your online experience. By continuing to use our website, you consent to our use of cookies. For further details on cookies, please see our cookies policy.

Our eBook, Thou Shalt Not Pass…I Think?! can help you overcome the challenges of monitoring and managing Cisco ASA firewalls. This eBook is a great read if you’ve been frustrated with monitoring firewalls, managing ACL configs, and troubleshooting VPN connections.

Table of contents

Overview

If you are monitoring a SQL Server availability group (AG), you must manually create SQL Server logins on secondary replicas when both of the following conditions are met:

You specified an AG listener during DPA registration, and

The DPA monitoring login does not exist on all replicas.

In most cases, the monitoring login will not exist on the replicas if you chose to have DPA create the monitoring user during registration. If you are using a monitoring login that you know already exists on all replicas, these instructions do not apply.

For information about the options for monitoring SQL Server AGs, see License types.

Background

SQL Server logins are stored on the [master] database, and therefore logins created on the primary replica are not automatically propagated to secondary replicas. Database users, however, are replicated to secondary replicas because replication occurs at the database level.

This is important when you have registered using an AG listener because the DPA monitoring login needs to continue to work when a primary failover occurs. The login is created on the primary replica during registration. However, because the login is not replicated to other AG replicas, the login will not exist when the primary fails over, and DPA will not be able to monitor. Therefore, you must manually create the login on each secondary replica that the listener's AG can fail over to.

Environment

DPA, all versions

Steps

Get the list of AG replicas

To display a list of secondary replicas that the AG could fail over to:

In DPA, select a SQL Server instance from the DPA home page.

Click on the AG Status tab in the upper-right corner.

Click on the listener's AG (the one in bold).

The Replicas section lists the replicas that need the DPA monitoring login and permissions.

Create the monitoring login

Create the login on each secondary replica using the same credentials as the monitoring login on the primary replica.

On each secondary replica, log in as a SYSADMIN user.

Run the following commands. Substitute the correct monitoring login and password.